THE SOLUTION TO SMARTER, SAFER KEY INJECTION
VeriShield Remote Key is a convenient, sophisticated
and secure solution that lets you remotely inject
encryption keys into your PIN pad devices anytime,
anywhere with no business disruption – avoiding
time-consuming, error-prone direct key replacement.
VeriShield
REMOTE KEY
VERISHIELD REMOTE KEY (VSRK) PORTAL
Security keys used in PIN pads may need to be replaced for a variety of reasons
such as to thwart a suspected security breach, respond to changing compliance
standards or simply as part of scheduled maintenance. VeriShield Remote Key
(VSRK) streamlines this critical, yet process-intensive task. With VSRK, you can
remotely and securely manage key injection, saving time and money. The devices
never have to leave their locations, decreasing downtime and the risk of fraud.
And VSRK’s superior flexibility lets you encrypt and deploy keys on your schedule.
Serial Number
Serial Number
Serial Number
Device serial
numbers are sent
electronically
through VeriFone’s
secure portal.
Reduce Costs
• Eliminate labor-intensive and error-prone manual key injection as well as the
expense of shipping devices to a key-injection site
• Avoid the cost and effort required to process devices through a secure location
• Minimize business disruptions due to key-injection process
Strengthen Security and Prevent Fraud
• Reduce key errors by using standard terminal serial number validation process
0
11 1
00 0001
00110
0110101
10001001
01 10
1001
0
1 01
100100110
0010
0 01 0
0010
1 010 10
10010
0110
1 01 0
010
1
1 110101
1 10
1010
0110
1010
0 00110
1
101
11010
0
1110
0
0
1 01 110
0 01
0 1
0 01
010
110
0 110
1 0110
1
0
01
0
01
1 110
0 100
0110
00100
0010
1000
0 10
0 101
0 101
10101
0100
1 01
0 01
01001
0 01
0 01
1001
1111
00100
1
0
11
1 01
01111
1000
001
000
0100
0001
0 00
110
1001
0010
1001
1010
01101
1001
0
10
0101
101110
0
10010
1110010
10
0
10
0
01 1 1010
1001
• Achieve a higher level of security with advanced asymmetric encryption
• Meet all industry security standards, including PCI 2.0, PCI DSS and the latest
Accredited Standards Committee (ASC) TR-39 audit guidelines
0
010011 1
1001
0 010100 0
11010
1 0101
0010
0 10010 10010
01 110
01 10 10110
100
010
10
1
10010010001
10
0
0 10101
0 01
1 010 10110
10001
1 01101
10010
1 110 1010
1 10
01110011
1 10
0 001 0100
11010
1 010100
1 010 101
00100
0 00
0
1 010 101
10101
0 01
0 01 0
10101
0 100 11
0 11
001
0 01
0 00
0 101001
01
0110110
1
0 01101
0 10110
0100100
1001
1 1010010
01101
00101
1
00
0 101
1 10
0 0010
0 101
00
01010
0
0
1 010
10
0
1 010
1 10
100
1 001
1 01
101010
1 10
10 01
010011
1
Encrypted keys
are electronically
loaded back into
the device.
1
4
2
VeriShield
Remote Key
Portal
3
VeriFone validates
device serial
numbers.
001101
100101
0100 0
1001001
100101 0
1 10
110
1 101001 0
00 01
0010
10 0101010
01 10110
01
0
1
10101
1
1 01
0 0
0 01101
0010
10 010 010010
1010
1 01 010100
01 110011
1010
0
01 10
00
1 11 11001
0 10
1 10 0
11 01
1100
0 00 0001
0101
0 01 0
0
1 01 010001
01
1 01011
001
1 01 11
1001
01 111
0 0
0100
0 10001
01 100
0 00
01
1001
0 1010
10 11
01 001
1
01
1
1
0 001
0 110
0 00
0 10
0 10
1001
1 10
0110
01 101
010 0
1010
01 0010
01 10
0 001
101001
10 01010
1
10
1 0110
10 0
1 110 1101
0 00
1
Requested keys are
encrypted and are
available via the
VRK Portal.
Enhance Flexibility
• Inject new security keys or bank/processor keys anytime, from anywhere and
for any reason
• Update keys online or offline on your schedule
Why VeriShield Remote Key (VSRK) Solution
Supported VeriFone Devices:
VX Evolution • VX Solutions • MX Series
• Developed based on industry standards such as ASC X9 TR-34
• Unique RSA key pair loaded in each device at manufacturing
• VeriFone’s end-to-end, hosted service reduces initial investment and ongoing
costs, and improves security
System
VeriFone and FutureX Co-Developed Solution
VeriFone secure VSRK Portal
Deployment Communication Options
Dial
Serial
Ethernet
USB
Wireless
Offline
Key Types
Master session keys,
DUKPT
VeriShield Security Scripts, VeriShield Protect Data
Encryption Keys
Supported VeriFone Devices
MX Series
VX Series
VX Evolution
Approvals/Standards
ANS x509
ANS x9.73
ANS x9.24 Part 1
ANS x9.24 Part 2
FIPS 140-2 Level 3
ASC X9/TG-3 Guidelines
PCI DSS
PCI PED
ASC X9 TR-31
ASC X9 TR-34
PCI PIN Security Requirements, Normative Annex A
w w w.verifone.com
© 2010 VeriFone, Inc. All rights reserved. VeriFone, the VeriFone logo, VeriShield Remote Key, VX Solutions, MX Series and VX Evolution are either trademarks or
registered trademarks of VeriFone in the United States and/or other countries. All other trademarks or brand names are the properties of their respective holders.
All features and specifications are subject to change without notice. Reproduction or posting of this document without prior VeriFone approval is prohibited.
11/10 45738 Rev C FS